# Vulnerabilities published in 2023 - [CVE-2023-28014](https://insights.sbomify.com/CVE-2023-28014/): HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability (medium 6.6) - [CVE-2023-28013](https://insights.sbomify.com/CVE-2023-28013/): HCL Verse is susceptible to a Reflected Cross-Site Scripting (XSS) Vulnerability (medium 6.5) - [CVE-2023-28012](https://insights.sbomify.com/CVE-2023-28012/): HCL BigFix Mobile can be affected by a command injection vulnerability (medium 5.4) - [CVE-2023-28010](https://insights.sbomify.com/CVE-2023-28010/): HCL Domino is susceptible to a sensitive information disclosure vulnerability (medium 4.0) - [CVE-2023-2801](https://insights.sbomify.com/CVE-2023-2801/): Grafana Missing Synchronization vulnerability (high 7.5) - [CVE-2023-28009](https://insights.sbomify.com/CVE-2023-28009/): HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection (medium 6.5) - [CVE-2023-28008](https://insights.sbomify.com/CVE-2023-28008/): HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection (high 7.1) - [CVE-2023-28006](https://insights.sbomify.com/CVE-2023-28006/): HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm. (high 7.0) - [CVE-2023-28005](https://insights.sbomify.com/CVE-2023-28005/): Security feature bypass in Trend Micro Endpoint Encryption Full Disk Encryption (medium 6.8) - [CVE-2023-28004](https://insights.sbomify.com/CVE-2023-28004/): Memory corruption in PowerLogic HDPM6000 (critical 9.8) - [CVE-2023-28003](https://insights.sbomify.com/CVE-2023-28003/): Auth bypass in EcoStruxure Power Monitoring Expert (medium 6.7) - [CVE-2023-28002](https://insights.sbomify.com/CVE-2023-28002/): Security feature bypass in FortiOS (medium 5.8) - [CVE-2023-28001](https://insights.sbomify.com/CVE-2023-28001/): Auth bypass in FortiOS (medium 4.1) - [CVE-2023-28000](https://insights.sbomify.com/CVE-2023-28000/): Command injection in FortiADC (medium 6.3) - [CVE-2023-2800](https://insights.sbomify.com/CVE-2023-2800/): Insecure Temporary File in huggingface/transformers (medium 4.7) - [CVE-2023-27999](https://insights.sbomify.com/CVE-2023-27999/): Command injection in FortiADC (high 7.6) - [CVE-2023-27998](https://insights.sbomify.com/CVE-2023-27998/): Information disclosure in FortiPresence (medium 5.3) - [CVE-2023-27997](https://insights.sbomify.com/CVE-2023-27997/): Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow (critical 9.2, exploited in the wild) - [CVE-2023-27995](https://insights.sbomify.com/CVE-2023-27995/): Code injection in FortiSOAR (high 7.2) - [CVE-2023-27993](https://insights.sbomify.com/CVE-2023-27993/): Path traversal in FortiADC (medium 5.7) - [CVE-2023-27992](https://insights.sbomify.com/CVE-2023-27992/): Zyxel Multiple NAS Devices Command Injection (critical 9.8, exploited in the wild) - [CVE-2023-27991](https://insights.sbomify.com/CVE-2023-27991/): Command injection in ATP series firmware (high 8.8) - [CVE-2023-27990](https://insights.sbomify.com/CVE-2023-27990/): Cross-site scripting in ATP series firmware (medium 4.8) - [CVE-2023-2799](https://insights.sbomify.com/CVE-2023-2799/): cnoa OA hard-coded password (medium 6.3) - [CVE-2023-27989](https://insights.sbomify.com/CVE-2023-27989/): Memory corruption in NR7101 firmware (medium 6.5) - [CVE-2023-27988](https://insights.sbomify.com/CVE-2023-27988/): Command injection in NAS326 firmware (high 7.2) - [CVE-2023-27987](https://insights.sbomify.com/CVE-2023-27987/): Apache Linkis gateway module token authentication bypass (critical 9.1) - [CVE-2023-27986](https://insights.sbomify.com/CVE-2023-27986/): Code injection in gnu:emacs (high 7.8) - [CVE-2023-27985](https://insights.sbomify.com/CVE-2023-27985/): Command injection in gnu:emacs (high 7.8) - [CVE-2023-27984](https://insights.sbomify.com/CVE-2023-27984/): Code injection in Custom Reports (RMS16.dll) (high 7.8) - [CVE-2023-27983](https://insights.sbomify.com/CVE-2023-27983/): Missing authorization in Custom Reports (RMS16.dll) (medium 6.5) - [CVE-2023-27982](https://insights.sbomify.com/CVE-2023-27982/): Security feature bypass in Custom Reports (RMS16.dll) (high 8.8) - [CVE-2023-27981](https://insights.sbomify.com/CVE-2023-27981/): Path traversal in Custom Reports (RMS16.dll) (high 7.8) - [CVE-2023-27980](https://insights.sbomify.com/CVE-2023-27980/): Missing authorization in Custom Reports (RMS16.dll) (high 8.8) - [CVE-2023-2798](https://insights.sbomify.com/CVE-2023-2798/): Denial of service in HtmlUnit (high 7.5) - [CVE-2023-27979](https://insights.sbomify.com/CVE-2023-27979/): Other in Custom Reports (RMS16.dll) (medium 6.5) - [CVE-2023-27978](https://insights.sbomify.com/CVE-2023-27978/): Deserialization in Custom Reports (RMS16.dll) (high 7.8) - [CVE-2023-27977](https://insights.sbomify.com/CVE-2023-27977/): Other in Custom Reports (RMS16.dll) (medium 6.5) - [CVE-2023-27976](https://insights.sbomify.com/CVE-2023-27976/): Other in EcoStruxure Control Expert (high 8.8) - [CVE-2023-27975](https://insights.sbomify.com/CVE-2023-27975/): Information disclosure in EcoStruxure Control Expert (high 7.1) - [CVE-2023-27974](https://insights.sbomify.com/CVE-2023-27974/): Information disclosure in bitwarden:bitwarden (high 7.5) - [CVE-2023-27973](https://insights.sbomify.com/CVE-2023-27973/): Memory corruption in HP LaserJet Pro (critical 9.8) - [CVE-2023-27972](https://insights.sbomify.com/CVE-2023-27972/): Memory corruption in HP LaserJet Pro (critical 9.8) - [CVE-2023-27971](https://insights.sbomify.com/CVE-2023-27971/): Memory corruption in HP LaserJet Pro (critical 9.8) - [CVE-2023-27970](https://insights.sbomify.com/CVE-2023-27970/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-2797](https://insights.sbomify.com/CVE-2023-2797/): Path traversal in GitHub plugin's code preview feature (low 3.1) - [CVE-2023-27969](https://insights.sbomify.com/CVE-2023-27969/): Use after free in iOS and iPadOS (high 7.8) - [CVE-2023-27968](https://insights.sbomify.com/CVE-2023-27968/): Memory corruption in macOS (high 7.1) - [CVE-2023-27967](https://insights.sbomify.com/CVE-2023-27967/): Memory corruption in Xcode (high 8.6) - [CVE-2023-27966](https://insights.sbomify.com/CVE-2023-27966/): Security feature bypass in macOS (medium 6.3) - [CVE-2023-27965](https://insights.sbomify.com/CVE-2023-27965/): Memory corruption in Studio Display Firmware Update (high 7.8) - [CVE-2023-27964](https://insights.sbomify.com/CVE-2023-27964/): Auth bypass in AirPods Firmware Update E (medium 5.4) - [CVE-2023-27963](https://insights.sbomify.com/CVE-2023-27963/): Missing authorization in iOS and iPadOS (high 7.5) - [CVE-2023-27962](https://insights.sbomify.com/CVE-2023-27962/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-27961](https://insights.sbomify.com/CVE-2023-27961/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-27960](https://insights.sbomify.com/CVE-2023-27960/): Privilege escalation in macOS (high 7.8) - [CVE-2023-2796](https://insights.sbomify.com/CVE-2023-2796/): EventON < 2.1.2 - Unauthenticated Event Access (medium 5.3) - [CVE-2023-27959](https://insights.sbomify.com/CVE-2023-27959/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-27958](https://insights.sbomify.com/CVE-2023-27958/): Memory corruption in macOS (critical 9.1) - [CVE-2023-27957](https://insights.sbomify.com/CVE-2023-27957/): Memory corruption in macOS (high 7.8) - [CVE-2023-27956](https://insights.sbomify.com/CVE-2023-27956/): Memory corruption in iOS and iPadOS (medium 5.5) - [CVE-2023-27955](https://insights.sbomify.com/CVE-2023-27955/): Memory corruption in iOS and iPadOS (medium 5.5) - [CVE-2023-27954](https://insights.sbomify.com/CVE-2023-27954/): Information disclosure in Safari (medium 6.5) - [CVE-2023-27953](https://insights.sbomify.com/CVE-2023-27953/): Memory corruption in macOS (critical 9.8) - [CVE-2023-27952](https://insights.sbomify.com/CVE-2023-27952/): Race condition in macOS (medium 4.7) - [CVE-2023-27951](https://insights.sbomify.com/CVE-2023-27951/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-27950](https://insights.sbomify.com/CVE-2023-27950/): Memory corruption in macOS (medium 5.5) - [CVE-2023-2795](https://insights.sbomify.com/CVE-2023-2795/): CodeColorer < 0.10.1 – Admin+ Stored Cross-Site Scripting (medium 4.8) - [CVE-2023-27949](https://insights.sbomify.com/CVE-2023-27949/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-27948](https://insights.sbomify.com/CVE-2023-27948/): Memory corruption in macOS (medium 5.5) - [CVE-2023-27947](https://insights.sbomify.com/CVE-2023-27947/): Memory corruption in macOS (medium 5.5) - [CVE-2023-27946](https://insights.sbomify.com/CVE-2023-27946/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-27945](https://insights.sbomify.com/CVE-2023-27945/): Information disclosure in Xcode (medium 6.3) - [CVE-2023-27944](https://insights.sbomify.com/CVE-2023-27944/): Security feature bypass in macOS (high 8.6) - [CVE-2023-27943](https://insights.sbomify.com/CVE-2023-27943/): Security feature bypass in iOS and iPadOS (medium 5.5) - [CVE-2023-27942](https://insights.sbomify.com/CVE-2023-27942/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-27941](https://insights.sbomify.com/CVE-2023-27941/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-27940](https://insights.sbomify.com/CVE-2023-27940/): Security feature bypass in iOS and iPadOS (medium 6.3) - [CVE-2023-2794](https://insights.sbomify.com/CVE-2023-2794/): Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function (high 8.1) - [CVE-2023-27939](https://insights.sbomify.com/CVE-2023-27939/): Memory corruption in macOS (medium 5.5) - [CVE-2023-27938](https://insights.sbomify.com/CVE-2023-27938/): Memory corruption in macOS (high 7.8) - [CVE-2023-27937](https://insights.sbomify.com/CVE-2023-27937/): Integer overflow in iOS and iPadOS (high 7.8) - [CVE-2023-27936](https://insights.sbomify.com/CVE-2023-27936/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-27935](https://insights.sbomify.com/CVE-2023-27935/): Memory corruption in macOS (high 8.8) - [CVE-2023-27934](https://insights.sbomify.com/CVE-2023-27934/): Memory corruption in macOS (high 8.8) - [CVE-2023-27933](https://insights.sbomify.com/CVE-2023-27933/): Memory corruption in iOS and iPadOS (medium 6.7) - [CVE-2023-27932](https://insights.sbomify.com/CVE-2023-27932/): Security feature bypass in Safari (medium 5.5) - [CVE-2023-27931](https://insights.sbomify.com/CVE-2023-27931/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-27930](https://insights.sbomify.com/CVE-2023-27930/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-2793](https://insights.sbomify.com/CVE-2023-2793/): Stack exhaustion in PreparePostForClientWithEmbedsAndImages (medium 6.5) - [CVE-2023-27929](https://insights.sbomify.com/CVE-2023-27929/): Memory corruption in iOS and iPadOS (medium 5.5) - [CVE-2023-27928](https://insights.sbomify.com/CVE-2023-27928/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-27927](https://insights.sbomify.com/CVE-2023-27927/): CVE-2023-27927 (medium 6.5) - [CVE-2023-27926](https://insights.sbomify.com/CVE-2023-27926/): Cross-site scripting in VK All in One Expansion Unit (medium 5.4) - [CVE-2023-27925](https://insights.sbomify.com/CVE-2023-27925/): Cross-site scripting in VK Blocks and VK Blocks Pro (medium 5.4) - [CVE-2023-27923](https://insights.sbomify.com/CVE-2023-27923/): Cross-site scripting in VK Blocks and VK Blocks Pro (medium 5.4) - [CVE-2023-27922](https://insights.sbomify.com/CVE-2023-27922/): Cross-site scripting in Newsletter (medium 6.1) - [CVE-2023-27921](https://insights.sbomify.com/CVE-2023-27921/): Hardcoded credentials in JINS MEME CORE (medium 6.5) - [CVE-2023-27920](https://insights.sbomify.com/CVE-2023-27920/): Missing authorization in SolarView Compact (medium 4.3) - [CVE-2023-2792](https://insights.sbomify.com/CVE-2023-2792/): Ephemeral messages return private channel contents in permalink previews (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/345/